Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1762162AbXK2Av3 (ORCPT ); Wed, 28 Nov 2007 19:51:29 -0500 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S1755777AbXK2AvW (ORCPT ); Wed, 28 Nov 2007 19:51:22 -0500 Received: from sovereign.computergmbh.de ([85.214.69.204]:56463 "EHLO sovereign.computergmbh.de" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1755503AbXK2AvV (ORCPT ); Wed, 28 Nov 2007 19:51:21 -0500 Date: Thu, 29 Nov 2007 01:51:20 +0100 (CET) From: Jan Engelhardt To: tvrtko.ursulin@sophos.com cc: Stephen Hemminger , linux-kernel@vger.kernel.org Subject: Re: Out of tree module using LSM In-Reply-To: Message-ID: References: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 772 Lines: 17 On Nov 28 2007 18:22, tvrtko.ursulin@sophos.com wrote: > >Talpa is modular itself being composed of a set of kernel modules of which >not all are loaded simultaneously. Where possible LSM can be used and _no_ >messing with syscall table will take place. Unfortunately where another >LSM user is present that won't work SELinux supports chaining, so if talpa is loaded as a secondary to selinux, where is the problem? For those LSMs which do not support chaining (*cough* apparmor *cough* be one, mtadm another), fix them. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/